Physical and Environmental Protection Controls
Physical and environmental protection covers all of the physical devices and infrastructure components of a data center. This includes devices and components inside the actual data center, such as servers and server racks, networking gear, cabling, cooling units, and Power Distribution Units (PDUs).
Security extends beyond the internal mechanisms to include the physical premises, where barriers, surveillance cameras, and controlled access points protect against unauthorized entry.
In addition to the data center and its physical assets, physical protection must also include the end user devices used to connect to the cloud environment. These devices can include desktops, laptops, mobile devices, and any other endpoint devices used by the customer. As a CCSP, you must remember that even physical protections have a shared responsibility.
The main priorities regarding physical and environmental protection are as follows:
- Restricting...